This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft File: tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft (raw, json) Hash identifier: 4xqP0fYqXz3/RDM7QE3dd5b2YgpQO0Hlzs+GdzPI+r8= Subject key identifier: D7:90:C9:B9:D0:CE:86:04:F8:79:72:51:38:60:12:F8:A0:88:6E:25 Authority key identifier: B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6 Certificate issuer: /CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6 Certificate serial: 019AF1D1B005DE44A89A972766EE23DD315C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft Manifest number: 0CBC Signing time: Sat 06 Dec 2025 04:00:42 +0000 Manifest this update: Sat 06 Dec 2025 04:00:42 +0000 Manifest next update: Sun 07 Dec 2025 04:00:42 +0000 Files and hashes: 1: DWyS6ktuYXD1HWtRdim_tw6aAHw.roa (hash: ZpPs8QmClGInLrYdfgabA/tiTnRpT7Agrz+vwk6fAyc=) 2: ebklZqmx0-dRJX-3stcdCCjPSZQ.roa (hash: oxCqtL4IdqqluHjcszErTou8uGJlC2MCnMVsPPzgZCM=) 3: tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl (hash: C73NK61xy/YOff93gVRWaySVMnzWhjZ9aNAhL8QuHPY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:b0:05:de:44:a8:9a:97:27:66:ee:23:dd:31:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6 Validity Not Before: Dec 6 04:00:42 2025 GMT Not After : Dec 7 04:00:42 2025 GMT Subject: CN=d790c9b9d0ce8604f8797251386012f8a0886e25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:58:86:fd:89:55:fe:bc:ca:8c:53:1d:31:05: 3b:fc:bc:1d:bc:6e:fc:ed:db:ef:4d:fe:e1:4f:5c: 03:a9:82:c5:36:4c:be:6e:2a:b8:2f:f5:c6:c2:10: b1:4f:09:3c:1d:2c:e3:57:c6:b7:00:52:1d:7a:65: 92:90:07:e7:c4:6e:b7:30:b7:4b:6a:d5:9c:86:f5: 9f:97:dd:f2:3a:8c:a9:ec:ab:19:ce:bb:5a:a2:47: 2b:96:dd:3a:2a:70:f4:01:e0:e3:45:dc:23:4e:58: 44:0b:44:f5:cc:b7:59:0e:0e:2f:2e:4c:b3:7e:46: b8:39:97:bb:14:9b:83:ef:e0:60:ba:42:4f:8a:01: ae:35:ab:fb:3f:6d:56:8f:f8:7f:17:03:f9:40:00: 6b:58:a3:50:a7:d3:62:7b:7e:15:17:9f:3f:6c:d5: d0:11:33:75:5a:c9:b6:f3:f5:5f:a0:40:e0:d1:ab: 81:91:f9:70:35:da:f9:29:3d:6e:a3:28:18:2e:78: 15:56:36:d5:ab:70:7f:25:4b:94:0b:41:41:7b:cb: 2b:f6:67:4c:54:5a:b0:4a:51:1c:f8:de:ae:8f:87: c2:cb:7b:20:c1:82:ff:a0:fc:c4:8d:d4:ed:4a:5b: c5:84:70:bb:bb:1b:4f:33:23:f7:50:7e:7e:bd:74: d1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:90:C9:B9:D0:CE:86:04:F8:79:72:51:38:60:12:F8:A0:88:6E:25 X509v3 Authority Key Identifier: keyid:B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:66:bc:58:a8:fb:b2:ea:52:cb:e5:7f:c9:2f:d5:ba:45:30: e2:d3:76:60:08:54:4b:28:a9:a3:68:73:3e:c2:f7:b0:e2:9c: 32:58:85:51:18:f7:09:de:62:46:41:3c:80:f9:62:41:02:2f: 4e:16:fd:39:92:ba:fd:a0:12:6d:2a:95:a2:d8:b4:de:2b:29: fc:55:b5:24:c8:cc:7e:3f:00:79:3e:7f:8d:7e:d2:42:63:fe: 00:f1:69:d6:ec:4b:99:be:59:97:0a:f5:74:dd:99:3e:aa:c5: d9:4c:51:a2:2a:25:9e:d5:90:61:b7:61:de:36:eb:af:a8:a0: 29:68:87:0d:e8:a8:5e:45:06:3e:cd:e9:78:a6:64:b7:44:97: b2:1a:98:a9:fe:73:82:8e:9e:3a:bb:7e:2a:8b:41:59:31:1d: a5:00:4d:ab:60:be:4a:cf:7c:06:2d:e2:3b:44:a2:dc:3f:de: a5:ff:17:c5:26:f2:2c:fa:04:a9:0d:b2:87:71:19:e0:d0:11: d9:4d:ca:fe:2f:28:f7:31:e2:b0:6a:af:de:7f:a6:55:59:c5: 22:ad:ec:6e:b3:e1:d6:b1:97:d5:91:80:c8:b0:cb:7b:b0:f3: a0:95:55:09:9d:a9:f8:28:03:8b:47:d2:65:79:02:1e:3e:4b: 4c:60:88:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0bAF3kSompcnZu4j3TFcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2Njc3OWYyMDU1YjI1NGY1ZDViMzI5MmVlYWYwZGQ1Nzk3 NzM3YTYwHhcNMjUxMjA2MDQwMDQyWhcNMjUxMjA3MDQwMDQyWjAzMTEwLwYDVQQD EyhkNzkwYzliOWQwY2U4NjA0Zjg3OTcyNTEzODYwMTJmOGEwODg2ZTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFiG/YlV/rzKjFMdMQU7/LwdvG78 7dvvTf7hT1wDqYLFNky+biq4L/XGwhCxTwk8HSzjV8a3AFIdemWSkAfnxG63MLdL atWchvWfl93yOoyp7KsZzrtaokcrlt06KnD0AeDjRdwjTlhEC0T1zLdZDg4vLkyz fka4OZe7FJuD7+BgukJPigGuNav7P21Wj/h/FwP5QABrWKNQp9Nie34VF58/bNXQ ETN1Wsm28/VfoEDg0auBkflwNdr5KT1uoygYLngVVjbVq3B/JUuUC0FBe8sr9mdM VFqwSlEc+N6uj4fCy3sgwYL/oPzEjdTtSlvFhHC7uxtPMyP3UH5+vXTRhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNeQybnQzoYE+HlyUThgEvigiG4lMB8GA1UdIwQY MBaAFLZnefIFWyVPXVsyku6vDdV5dzemMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG1kNThnVmJKVTlkV3pLUzdxOE4xWGwzTjZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xZjgyZTUtMzA5OC00NTNhLWFmNjQt Y2FiNzE3YTgwOWU3LzEvdG1kNThnVmJKVTlkV3pLUzdxOE4xWGwzTjZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8xZjgyZTUtMzA5OC00NTNhLWFmNjQtY2FiNzE3YTgwOWU3 LzEvdG1kNThnVmJKVTlkV3pLUzdxOE4xWGwzTjZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2a8WKj7 supSy+V/yS/VukUw4tN2YAhUSyipo2hzPsL3sOKcMliFURj3Cd5iRkE8gPliQQIv Thb9OZK6/aASbSqVoti03isp/FW1JMjMfj8AeT5/jX7SQmP+APFp1uxLmb5Zlwr1 dN2ZPqrF2UxRoiolntWQYbdh3jbrr6igKWiHDeioXkUGPs3peKZkt0SXshqYqf5z go6eOrt+KotBWTEdpQBNq2C+Ss98Bi3iO0Si3D/epf8XxSbyLPoEqQ2yh3EZ4NAR 2U3K/i8o9zHisGqv3n+mVVnFIq3sbrPh1rGX1ZGAyLDLe7DzoJVVCZ2p+CgDi0fS ZXkCHj5LTGCISQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:09 2025 by rpki-client